Privacy Policy

OMIXUS ("we" or "the Store") is committed to protecting your privacy and personal data in every dealing with us, whether you request our mobile maintenance service where our technician comes to you wherever you are, or shop from our online store for mobile phones and accessories. This policy explains what data we collect, why we collect it, the legal basis for processing it, who we share it with, how long we retain it, your rights regarding it, and how we protect it, all in accordance with the Personal Data Protection Law (PDPL) in Saudi Arabia and its Implementing Regulation. By using our website or requesting any of our services, you acknowledge that you have read this policy.

OMIXUS is the "controller" of the personal data collected from you, that is, the party that determines the purposes and means of processing your data.

• Legal name of the establishment: Omixus Establishment
• Registered address: Al Khaleej District, Riyadh, Saudi Arabia
• Unified national number of the establishment: 7034447743
• Privacy requests channel: email [email protected] or WhatsApp +966570984090
• Verification: an establishment verified on the "Maroof" platform (maroof.sa)

Our establishment falls within the category of small establishments that the law does not mandatorily require to appoint a "Personal Data Protection Officer." Nonetheless, we have dedicated the contact channel above to receive and respond to any request or inquiry related to your personal data.

We collect only the data necessary to provide our services, which, depending on your dealings with us, includes:

• Identity and contact data: name, mobile number, email.
• Address and location data: the district and address where you request the technician to arrive for the maintenance service, or the delivery address for your store order. Your home or on-site location is collected for the purpose of the visit only, and is handled to a necessary and limited extent.
• Order and service data: the device type and model, fault description, visit or order date, your order and invoice history, the type of part agreed upon, and warranty certificate data.
• Payment data: we deal with payment service providers to complete purchases; we do not store your full credit card numbers with us, as they are processed by authorized payment providers through secure channels.
• Device and browsing data: IP address, browser and device type, session identifiers, and cookies when you browse the website.

In the course of our ordinary work, we do not collect any "sensitive data" such as health, ideological, or security data. If it becomes necessary to handle highly private data, this will only be done with your explicit consent and in accordance with the law.

We process your personal data exclusively for the following purposes:

• Carrying out maintenance bookings and arranging the technician's arrival at your location.
• Processing store purchase orders and preparing, shipping, and delivering them to you.
• Issuing invoices, proof of payment, and fulfilling legal obligations.
• Managing the warranty and after-sales services, and issuing and verifying the warranty certificate.
• Providing support and communicating with you via WhatsApp, phone, or email regarding your order or service.
• Fraud prevention and protecting the store and customers and ensuring transaction security.
• Improving our services and the website experience.
• Sending offers and marketing messages, only after obtaining your prior consent, which you may withdraw at any time.

We rely on a clear legal basis for processing your data, which differs according to the purpose:

• Performance of a contract: processing the data necessary to carry out the maintenance or purchase order you requested (such as your name, address, mobile number, and fault description).
• Consent: the basis we rely on for marketing messages and non-essential cookies; it is consent that is specific to each purpose, documented, and you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
• Legal obligation: retaining invoice and transaction records for the periods required by commercial and statutory regulations.
• Legitimate interest: purposes such as fraud prevention, securing the website, and improving the service, in a manner that does not conflict with your rights and freedoms, and without relying on it for any sensitive data.

We do not sell your personal data. We share it only to the extent necessary with specific categories of recipients to complete the service, namely:

• Payment processors: payment service providers (mada, Visa, Mastercard, STC Pay, Apple Pay) and installment partners (tabby and tamara), in order to complete, secure, and verify the payment process.
• Shipping and delivery companies: we share the name, address, and mobile number with the shipping company to deliver your store order.
• WhatsApp / Meta: we communicate with you via WhatsApp for maintenance booking and support, and accordingly your messages pass through the WhatsApp / Meta infrastructure and are subject to its terms and policies.
• Government and competent authorities: where there is a legal obligation requiring it or based on an official request from a competent authority.

We undertake to enter into written "data processing agreements" with the service providers who process data on our behalf, obligating them to a level of protection equivalent to that required by the law, and preventing them from using your data for any purpose other than the one agreed upon. In the event that we correct any data we previously shared, we notify the parties that received it of that correction.

Some of your data may be transferred or processed outside Saudi Arabia, particularly in the case of communication via WhatsApp / Meta or the use of certain payment or analytics tools whose servers are managed abroad. This transfer is carried out in accordance with the controls of the law: for a legitimate purpose, without prejudice to the security and interests of the Kingdom, with the minimum data necessary, and in a manner that ensures a level of protection no less than that provided by the law inside the Kingdom, or by relying on the safeguards approved by the competent authority when needed.

We retain your personal data only for the period necessary to achieve the purpose for which it was collected, as follows:

• Order, invoice, and transaction data: retained for the period required by the commercial and statutory regulations in the Kingdom, then destroyed.
• Maintenance booking data and location data: retained to the extent necessary to manage the visit, warranty, and after-sales service, then destroyed once the need ceases.
• Contact and marketing data: retained as long as your consent remains in effect, and destroyed when consent is withdrawn.

When the purpose of processing ceases, we stop collecting the data and work to destroy it securely, including backups, or to retain it in an anonymized form that does not allow you to be identified.

The Personal Data Protection Law guarantees you the following rights regarding your data held by us:

• The right to be informed: to know the legal basis and purpose of collecting your data.
• The right of access: to view your personal data available with us.
• The right to obtain a copy: to obtain a copy of your data in a clear and readable format.
• The right to rectification: to request the correction, updating, or completion of your data.
• The right to destruction: to request the deletion of your data whenever the need for it ceases, taking into account any legal obligation to retain it.
• The right to withdraw consent: to withdraw your consent at any time, including unsubscribing from marketing messages.

To exercise any of these rights, contact us at [email protected] or WhatsApp +966570984090. We will respond to your request within a period not exceeding 30 days, extendable once for a similar period when needed, with prior notice to you. If you believe that the processing of your data violates the law, you have the right to file a complaint with the Saudi Data and AI Authority (SDAIA).

We recommend sending privacy and data subject rights requests via email [email protected] as the primary channel. When communicating via WhatsApp, please do not attach images of identity documents or any sensitive data, and we will guide you to complete any required verification through a secure channel.

We apply appropriate organizational and technical measures to protect your data from unauthorized access, disclosure, alteration, or destruction, including access controls and securing payment and communication channels. In the event of any personal data leak or breach that may harm you, we are committed to notifying the Saudi Data and AI Authority within the statutory period, and to notifying those affected without undue delay and in clear language.

Because the privacy of your device is part of the privacy of your data, we make the following pledge to you when carrying out any maintenance service:

• Our technicians never ask you for the device lock code, the Apple ID account, the Google account, two-factor authentication (2FA) codes, nor do they ask to perform a factory reset.
• Our maintenance work is hardware-only work, and is carried out in front of you without your device leaving your sight.
• We do not copy, store, transfer, or share any data inside your device with any third party.
• Our access to the device content is limited to the extent necessary to complete the repair only, and when there is a technical need to access the system, this is done with your permission, and you can change or delete any code you allowed as soon as you receive your device.
• Backup responsibility: you are responsible for taking a complete backup of your data (photos, contacts, files, applications) before handing over the device. We do not guarantee the integrity of data already present on the device, and we are not responsible for its loss due to causes preceding the service, while we handle your device with the utmost care.
• Proof of device ownership: by requesting the maintenance service, you acknowledge that you are the legal owner of the device or authorized by its owner to repair it. We have the right to request proof of your ownership of the device when needed, and we reserve our right to refuse or stop providing the service for any device that is proven or suspected to be lost or stolen, without the need to register the device's IMEI or serial number.

We use two types of cookies on our website:

• Essential cookies: necessary for the basic operation of the website, such as session management, the shopping cart, and completing the order, and they cannot be disabled without affecting the operation of the website.
• Non-essential analytical / marketing cookies: they help us understand and improve the use of the website, and are not activated except with your consent, and you can reject them or withdraw your consent at any time.

You can control or delete cookies through your browser settings, noting that disabling some of them may affect certain functions of the website.

Our services and products are directed at adults. If the matter concerns the data of a person under 18 years of age, processing it requires the consent of a guardian, and we give it special care in accordance with the law. If we learn that we have collected the data of a minor without valid consent, we promptly destroy it.

We may update this policy from time to time to keep pace with changes in our services or in the applicable regulations. The latest version published on this page is the one adopted, and it takes effect as soon as it is published. We advise you to review it periodically. When making material changes, we strive to notify you by appropriate means.

This policy is governed by and interpreted in accordance with the laws of Saudi Arabia, and in particular the Personal Data Protection Law and its Implementing Regulation. This policy supplements your legal rights and does not cancel them, and in the event of any conflict between it and the law, the law prevails. The Arabic version is the authoritative reference.

This policy is subject to the laws of Saudi Arabia, and the competent judicial and administrative authorities in the Kingdom have jurisdiction to consider any dispute arising from it, without prejudice to your right to escalate to the Ministry of Commerce via a commercial report or the number 1900.

Last updated: 4 June 2026

For any inquiry or request related to your privacy and personal data, contact us via WhatsApp +966570984090 or email [email protected].